What are my options for full system (or at least home directory) encryption?Unfortunately FileVault is nowhere near as secure as whole disk encryption; it's even less secure than simply having a truecrypt volume. This is because FileVault simply employs user permissions to restrict access to its contents, which can be easily overcome if an attacker has physical access to your machine.